2011-04-07 SEC Press pdf 94 KB 19,432 chars

In the Matter of : AND CEASE-AND-DESIST PROCEEDINGS,

summary

David C. Levine, former National Sales Manager of GunnAllen Financial, aided and abetted violations of Regulation S-P by downloading 16,000 customer accounts ($850M) onto a thumb drive, then facilitating their unauthorized transfer to a new broker-dealer via misleading letters that failed to provide a reasonable opt-out opportunity, resulting in an SEC cease-and-desist order, censure, and $20,000 penalty.

paragraph

David C. Levine, while serving as National Sales Manager of GunnAllen Financial, unlawfully downloaded nonpublic customer data for approximately 16,000 direct application accounts—valued at $850 million—onto a personal thumb drive before resigning in April 2010. He then mailed letters on GunnAllen’s letterhead notifying customers of a transfer to his new firm, but failed to provide adequate notice, opt-out procedures, or contact information, violating Rules 7(a) and 10(a) of Regulation S-P, while also breaching the Safeguard Rule (Rule 30(a)) by exposing data to unauthorized access. Without admitting or denying the allegations, Levine consented to an SEC cease-and-desist order, a censure, and a $20,000 civil penalty for aiding and abetting these privacy and security violations.

narrative

David C. Levine, former National Sales Manager of GunnAllen Financial, Inc., played a central role in a regulatory violation involving the improper transfer of nonpublic customer information from a failing broker-dealer to his new affiliation. Between March and June 2010, as GunnAllen prepared to file for bankruptcy, Levine downloaded sensitive data for approximately 16,000 direct application accounts—totaling $850 million in assets—onto a portable thumb drive, bypassing the firm’s security protocols and violating Rule 30(a) of Regulation S-P. After resigning on April 23, 2010, he coordinated the transfer of these accounts to a new broker-dealer and mailed letters on GunnAllen’s official letterhead, approved by its president, informing customers of the change but failing to provide a reasonable opportunity to opt out, as required by Rules 7(a) and 10(a). The letters omitted critical details such as the identity of the new broker-dealer, contact information, and clear opt-out procedures, rendering the notice legally insufficient. Levine’s actions directly facilitated the unauthorized disclosure of customer data to a nonaffiliated third party, aiding and abetting GunnAllen’s violations of Regulation S-P. The SEC found that Levine recklessly exposed customer information to potential unauthorized access and use. Without admitting or denying the findings, Levine consented to an SEC order imposing a cease-and-desist order, a formal censure, and a $20,000 civil penalty to resolve the administrative proceedings.

Enriched metadata

Scheme
unregistered-securities (100%)
Outcome
settled
Civil penalty
$20,000
Classified unregistered-securities(confidence 100%). EDGAR detection: forms Form D/S-1· recall 41% / precision 30%. detection rule →
Statutes
31 U.S.C. 371717 C.F.R. §248.10(a)17 C.F.R. §248.7(a)17 C.F.R. §248.30(a)Sections 15(b) and 21C of the Securities Exchange ActSections 15(b) and 21C of the Securities Exchange Act
Parties
david c. levinegunnallen financial, inc.letter notifying customersnonpublic customer informationnonpublic personal informationSecurities and Exchange Commission
Keywords
gunnallenlevinetransferaccountsinformationdirect applicationcustomerssecurities exchangeapplication accountsreceiving brokercommissionoutregulationoptaccount

Extracted insights

Dollar amounts 2
  • $850.00M $850 million $100M–$1B
  • $20K $20,000 $10K–$100K
Entities 6
  • person david c. levine
  • company gunnallen financial, inc.
  • person letter notifying customers
  • person nonpublic customer information
  • person nonpublic personal information
  • agency Securities and Exchange Commission
Triples 9
  • Securities and Exchange Commission instituted administrative and cease-and-desist proceedings
  • Securities and Exchange Commission accepted Offer of Settlement
  • David C. Levine consented to entry of Order
  • GunnAllen Financial, Inc. violated Regulation S-P
  • GunnAllen Financial, Inc. authorized transfer of 16,000 direct application accounts
  • David C. Levine downloaded nonpublic customer information
  • David C. Levine resigned from GunnAllen Financial, Inc.
  • David C. Levine mailed letter notifying customers
  • David C. Levine supplied nonpublic personal information
Text layers
Extracted body text (19,432c)

 
 
 
 
 
 
 
 
 
 
 
     
  
                        
     
   
     
   
 
 
 
 
 
UNITED STATES OF AMERICA 

Before the
 
SECURITIES AND EXCHANGE COMMISSION 

SECURTIES EXCHANGE ACT OF 1934 
Release No. 64222 / April 7, 2011 
ADMINISTRATIVE PROCEEDING 
File No. 3-14327 
______________________________ 
: ORDER INSTITUTING ADMINISTRATIVE 
In the Matter of : AND CEASE-AND-DESIST PROCEEDINGS,  
:            PURSUANT            TO            SECTIONS 15(b) AND 21C   
: OF THE SECURITIES EXCHANGE 
David C. Levine, : ACT OF 1934, MAKING FINDINGS, AND  
: IMPOSING REMEDIAL SANCTIONS AND  
Respondent. : A CEASE-AND-DESIST ORDER  
______________________________: 
I. 
The Securities and Exchange Commission (“Commission”) deems it appropriate and in 
the public interest that public administrative and cease-and-desist proceedings be, and hereby 
are, instituted pursuant to Sections 15(b) and 21C of the Securities Exchange Act of 1934 
(“Exchange Act”) against David C. Levine (“Levine” or “Respondent”). 
II. 
In anticipation of the institution of these proceedings, Respondent has submitted an Offer 
of Settlement (the “Offer”) which the Commission has determined to accept.  Solely for the 
purpose of these proceedings and any other proceedings brought by or on behalf of the 
Commission, or to which the Commission is a party, and without admitting or denying the 
findings herein, except as to the Commission’s jurisdiction over him and the subject matter of 
these proceedings, which are admitted, Respondent consents to the entry of this Order Instituting 
Administrative and Cease-and-Desist Proceedings Pursuant to Sections 15(b) and 21C of the 
Securities Exchange Act of 1934, Making Findings, and Imposing Remedial Sanctions and a 
Cease-and-Desist (“Order”), as set forth below. 

 
 
 
 
 
 
 
 
 
  
 
 
 
                                                
 
      
  
III. 
On the basis of this Order and Respondent’s Offer, the Commission finds that
1
: 
Summary 
These proceedings arise out of violations by GunnAllen Financial, Inc. (“GunnAllen”), 
formerly a Tampa, Florida-based broker-dealer, of Regulation S-P which governs the privacy 
and protection of consumer financial information.  Between March and June 2010, as it was 
winding down its business operations and planned to file for bankruptcy, GunnAllen’s president 
authorized the transfer of approximately 16,000 direct application accounts with an estimated 
total net asset value of $850 million to Levine, who then served as GunnAllen’s National Sales 
Manager, and any broker-dealer with whom he became affiliated.  Direct application accounts 
are those accounts held by the product issuer, typically a mutual fund or insurance company.   
In connection with this transfer, and prior to resigning from GunnAllen, Levine 
downloaded nonpublic customer information for the 16,000 accounts on a portable thumb drive.  
Levine resigned from GunnAllen on April 23, 2010, and then affiliated with a new broker-dealer.  
Two weeks after joining the new broker-dealer, Levine mailed a letter, reviewed and approved 
by GunnAllen’s president and on GunnAllen letterhead, notifying the 16,000 customers that 
GunnAllen could no longer service the accounts, that Levine and his business partner were 
servicing the accounts, and advising them of their right to “opt out” of the transfer.  This letter 
failed to provide customers with a reasonable opportunity to opt out of the transfer because, 
among other things, it was sent after the customers’ information was transferred to Levine and it 
did not provide procedures on how to exercise that right, contact information or even the identity 
of the new broker-dealer.  Thereafter, Levine supplied the broker-dealer receiving the accounts 
with nonpublic personal information for the 16,000 accounts, including the product custodian, 
the account holder’s name and address, and the account number and value for each account. 
GunnAllen’s transfer of this nonpublic information without providing its customers 
reasonable notice to opt out violated Rule 10(a)(1) of Regulation S-P (17 C.F.R. §248.10(a)(1)), 
which prohibits broker-dealers from disclosing nonpublic personal information they collect from 
customers to nonaffiliated third parties unless they notify their customers of their right to opt out 
of the disclosure in accordance with Rule 7(a) of Regulation S-P (17 C.F.R. §248.7(a)), and they 
provide their customers with a reasonable opportunity to opt out of the disclosure.  Levine also 
took possession of the information in a manner that placed the information at risk of 
unauthorized access and use in contravention of GunnAllen’s obligation to ensure the security 
and confidentiality of the information as required by Rule 30(a) of Regulation S-P (the 
“Safeguard Rule”) (17 C.F.R. §248.30(a)).  As a result, Levine aided and abetted and caused 
GunnAllen’s violations of Rules 7(a), 10(a) and 30(a) of Regulation S-P.    
 The findings herein are made pursuant to Respondent’s Offer of Settlement and are not binding on any other 
persons or entities in this or any other proceeding. 
2
 
1

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Respondent 
1. Levine, age 44, resides in Delray Beach, Florida.  From May 2005 to April 2010, 
Levine served as GunnAllen’s National Sales Manager.  Although he was employed with 
GunnAllen through the end of April 2010, on March 30, 2010, GunnAllen filed Forms U5 
terminating the registrations of all its representatives, including Levine’s. 
GunnAllen Financial, Inc. 
2. GunnAllen had a principal place of business in Tampa, Florida and was 
registered with the Commission as a broker-dealer from March 1986 to April 2010.  The firm 
operated mostly under an independent contractor model and maintained franchise offices 
nationwide.   In March 2010, the Financial Industry Regulatory Authority (FINRA) determined 
that GunnAllen did not have the requisite net capital to conduct business as a broker-dealer and 
restricted its operations to liquidating securities transactions.  Unable to raise the additional 
capital it needed to continue to conduct business, in April 2010 GunnAllen discontinued its 
operations, filed for bankruptcy, and submitted a Broker-Dealer Withdrawal, or “BDW”, Form 
with the Commission withdrawing its registration.  The withdrawal became effective on June 11, 
2010. 
The Account Transfers 
3. As it was winding down its business operations in March and April 2010, 
GunnAllen and its registered representatives transferred the firm’s customer accounts to other 
broker-dealers.  In addition to servicing the brokerage accounts held by its clearing firm, 
GunnAllen serviced and was the broker of record on tens of thousands of direct application 
accounts held by various mutual fund and variable annuity and insurance companies.  As broker 
of record on the direct application accounts, GunnAllen was entitled to the commissions, trailers 
and other fees generated by the accounts. 
4. On March 28, 2010, GunnAllen sent a letter, drafted by Levine and reviewed and 
approved by GunnAllen’s president, to all of the firm’s direct application account customers 
notifying them that it expected to cease operations on March 31, 2010 (the “First  Notice”).  The 
First Notice instructed customers that they had three options for arranging ongoing service of 
their accounts: (i) they could contact their GunnAllen registered representative to make 
arrangements to transfer their account to the new firm with which he or she associated, (ii) they 
could contact a brokerage firm of their own choice and request their account be transferred to 
that firm, or (iii) they could contact the mutual fund or variable annuity or insurance company 
holding their investment directly to make arrangements for service. 
5. However, on March 30, 2010, just two days after GunnAllen sent the First Notice, 
at the request of Levine, GunnAllen’s president authorized the transfer of approximately 16,000 
direct application accounts serviced by GunnAllen, which had an estimated total net asset value 
of $850 million.  GunnAllen’s president executed “Block Broker-Dealer Change Authorization 
for Directly Held Accounts” forms (the “Block Transfer Forms”) covering those accounts and 
3
 

 
 
 
 
 
 
 
   
 
 
 
 
 
 
 
 
gave the signed Block Transfer Forms to Levine and another GunnAllen representative with 
whom Levine planned to form a business partnership when GunnAllen ceased doing business.  
The executed Block Transfer Forms authorized the transfer of the 16,000 accounts to any broker-
dealer that Levine and his partner chose to associate with after they left GunnAllen.  
6. In April 2010, while assisting in the wind down of GunnAllen’s business 
operations, Levine and his partner sought employment with other brokerage firms by offering, 
among other things, to transfer to them the direct application accounts for which they held the 
Block Transfer Forms.  On April 23, 2010, they were hired by another broker-dealer registered 
with the Commission (the “Receiving Broker”).   Levine and his partner agreed to share 10% of 
the commissions, trailers and other fees generated by the accounts with the Receiving Broker and 
to solicit the account holders to purchase additional products from the Receiving Broker. 
7. The same day that Levine was hired by the Receiving Broker, he resigned from 
GunnAllen.  On April 23, 2010, or shortly before then, Levine, with the approval of GunnAllen’s 
president, downloaded a spreadsheet from a GunnAllen computer server or drive to a personal 
thumb drive and physically removed it from the firm.  The spreadsheet contained the custodian, 
account holder’s name and address (but not his or her social security number), and account 
number and value for each of the approximately 16,000 direct application accounts covered by 
the Block Transfer Forms. 
8. Two weeks after associating with the Receiving Broker, on May 14, 2010, 
Levine, with the approval of GunnAllen’s president, sent the GunnAllen customers holding the 
direct application accounts a letter notifying them that their accounts would be transferred to the 
brokerage firm he was newly associated with unless they objected to the transfer within fifteen 
days of the date of the letter (the “Second Notice”).  Levine drafted and personally paid for the 
cost of copying and mailing the Second Notice, which was on GunnAllen letterhead.  Levine 
engaged a third party vendor to copy and mail the Second Notice on his behalf and supplied it 
with the customer names and addresses he took from GunnAllen on his thumb drive.  
9. After mailing the Second Notice, Levine contacted GunnAllen to see if it had 
received notices from any customers seeking to opt out of the account transfer, but did not take 
any other steps to verify customer objections to the transfer and, thereafter, e-mailed the 
Receiving Broker the customer account information that had been released to him by GunnAllen 
on his thumb drive.  Levine’s partner supplied the Receiving Broker with the Block Transfer 
Forms.  
10. Beginning on June 3, 2010, and continuing through at least June 7, 2010, the  
Receiving Broker counter-signed the Block Transfer Forms accepting the direct application 
accounts from GunnAllen.   It also delivered the fully executed forms to the appropriate mutual 
fund and variable annuity and insurance companies along with a letter instructing them to change 
the broker of record on the direct application accounts from GunnAllen to the Receiving Broker. 
4
 

  
 
 
 
 
 
 
 
 
 
 
     
 
 
 
 
 
                                                
 
        
      
Violations of the Privacy Rules 
11. Rule 10(a) of Regulation S-P prohibits brokers and dealers, either directly or 
through an affiliate, from disclosing nonpublic personal information about their customers to 
nonaffiliated third parties unless they have provided their customers with a privacy notice 
describing the nonpublic personal information they disclose, and notify their customers of their 
right to opt out of any disclosure and afford them a reasonable opportunity to opt out of the 
disclosure before it is made. 
12. Rule 7(a) of Regulation S-P requires brokers and dealers to provide their 
customers with opt out notices that are clear and conspicuous and that accurately explain 
customers’ opt out rights.  The notice must explicitly state that the broker or dealer discloses, or 
reserves the right to disclose, nonpublic personal information about its customers and that they 
have the right to opt out of any disclosure. Additionally, the notice must provide a reasonable 
means by which customers can exercise their right to opt out.  
13. GunnAllen violated Rules 7(a) and 10(a) of Regulation S-P by failing to provide 
the direct application account customers whose accounts were transferred to the Receiving 
Broker with proper notice and a reasonable opportunity to opt out of the transfer before 
supplying their personal nonpublic information to Levine and the Receiving Broker.  Also, 
GunnAllen’s disclosure of the information was not covered by any exception from Regulation S-
P’s notice and opt out requirements, including an exception in Rule 14 of Regulation S-P for 
disclosures that are required, or are a usual, appropriate, or acceptable method, in connection 
with the transfer of accounts, because GunnAllen failed to obtain the customers’ affirmative 
consent to transfer the direct applications accounts.  The First and Second Notices failed to 
inform account holders that GunnAllen would physically transfer or, in the case of the Second 
Notice, had physically transferred, their account information.  The Second Notice also failed to 
provide account holders with a reasonable means to exercise their right to opt out of the transfer, 
or sufficient time within which to do so.    Further, the direct application account customers were 
not provided with a paper or electronic form to object to the transfer although Rule 7(a)(2)(iii) of 
Regulation S-P expressly states it is unreasonable “if the only means of opting out is for the 
consumer to write his or her own letter to exercise the opt out right.”  Finally, the Second Notice 
provided only fifteen days to opt out of the transfer although the circumstances did not warrant 
such a short response period. 
14. As a result of the conduct described above, Levine willfully
2
 aided and abetted 
and caused GunnAllen’s violations of Rules 7(a) and 10(a) of Regulation S-P.   
Violations of the Safeguard Rule 
15. Rule 30(a) of Regulation S-P, or the Safeguard Rule, requires every broker and 
dealer to maintain policies and procedures that address administrative, technical, and physical 
 A willful violation of the securities laws means merely “that the person charged with the duty knows what he is 
doing.”  Wonsover v. SEC, 205 F.3d 408, 414 (D.C. Cir. 2000) (quoting Huges v. SEC, 174 F.2d 969, 977 (D.C. Cir. 
1949). 
5
 
2

   
 
 
 
 
 
 
 
 
 
 
 
  
  
 
 
 
safeguards for the protection of customer records and information.  The policies and procedures 
must be reasonably designed to (1) insure the security and confidentiality of customer records 
and information; (2) protect against any anticipated threats or hazards to the security or integrity 
of customer records and information; and (3) protect against unauthorized access to or use of 
customer records or information that could result in substantial harm or inconvenience to any 
customer. 
16. GunnAllen violated Rule 30(a) of Regulation S-P because it knew that there was a 
reasonably foreseeable risk that its departing registered representatives would disclose customer 
nonpublic personal information to successor brokerage firms but nonetheless failed to adopt, and 
did not have in place while winding down its operations, any written policies or procedures 
addressing the transfer and protection of such information.   
17. As a senior officer of GunnAllen, Levine was familiar with Regulation S-P and 
GunnAllen’s responsibilities under the rule for maintaining the confidentiality and physical 
security of the information that the firm collected from its customers.  Nonetheless, he placed 
customer information at risk of unauthorized access and misuse when he knowingly downloaded 
customer information for approximately 16,000 GunnAllen direct application accounts to a 
personal thumb drive that he physically took from the firm.   
18. As a result of the conduct described above, Levine willfully aided and abetted and 
caused GunnAllen’s violations of Rule 30(a) of Regulation S-P.  
IV. 
In view of the foregoing, the Commission deems it appropriate and in the public interest 
to impose the sanctions agreed to in Respondent’s Offer. 
Accordingly, pursuant to Sections 15(b) and 21C of the Exchange Act, it is hereby 
ORDERED that: 
A. Respondent Levine cease and desist from committing or causing any violations and 
any future violations of Rules 7(a), 10(a) and 30(a) of Regulation S-P. 
B.	 R 
espondent Levine is censured. 
C. Respondent Levine shall, within ten days of the entry of this Order, pay a civil money 
penalty of $20,000 to the United States Treasury.     If timely payment is not made additional 
interest shall accrue pursuant to 31 U.S.C. 3717.  Such payment shall be: (A) made by wire 
transfer, United States postal money order, certified check, bank cashier’s check, or bank money 
order; (B) payable to the Securities and Exchange Commission; (C) hand-delivered or mailed to 
the Office of Financial Management, Securities and Exchange Commission, Operations Center, 
6432 General Green Way, Alexandria, VA  22312-0003; and (D) submitted under cover letter 
that identifies Levine as a Respondent in these proceedings, the file number of these  
6
 

 
proceedings, a copy of which cover letter and wire transfer, money order or check shall be sent 
to Teresa J. 
7
 

 
 
 
 
 
        
 
Verges, Assistant Regional Director, Miami Regional Office, Securities and Exchange 
Commission, 801 Brickell Avenue,  Suite 1800, Miami, FL 33131. 
By the Commission. 
Elizabeth M. Murphy 
       Secretary 
8
 

 
 
 
 
   
  
 
 
 
 
   
  
 
 
 
 
 
 
 
 
Service List 
Rule 141 of the Commission's Rules of Practice provides that the Secretary, or another 
duly authorized officer of the Commission, shall serve a copy of the Order Instituting 
Administrative and Cease-and-Desist Proceedings, Pursuant to Sections 15(b) and 21C of the 
Securities Exchange Act of 1934, Making Findings, and Imposing Remedial Sanctions and a Cease-
and-Desist Order ("Order") on the Respondent and his legal agent. 
The attached Order has been sent to the following parties and other persons entitled to 
notice: 
Honorable Brenda P. Murray 
Chief Administrative Law Judge 
Securities and Exchange Commission 
100 F Street, N.E. 
Washington, DC 20549-2557                                                
Teresa J. Verges, Esq. 
Miami Regional Office 
Securities and Exchange Commission 
801 Brickell Avenue, Suite 1800 
Miami, FL  33131 
David C. Levine 
c/o Gregg J. Breitbart, Esq. 
Gusrae, Kaplan, Bruno & Nusbaum PLLC 
2101 NW Corporate Boulevard, Suite 218 
Boca Raton, FL 33431 
Gregg J. Breitbart, Esq. 
Gusrae, Kaplan, Bruno & Nusbaum PLLC 
2101 NW Corporate Boulevard, Suite 218 
Boca Raton, FL 33431 
9
 
OCR text (19,402c · tika · 95% conf)
UNITED STATES OF AMERICA 

Before the
 

SECURITIES AND EXCHANGE COMMISSION 


SECURTIES EXCHANGE ACT OF 1934 
Release No. 64222 / April 7, 2011 

ADMINISTRATIVE PROCEEDING 
File No. 3-14327 
______________________________ 

: ORDER INSTITUTING ADMINISTRATIVE 
In the Matter of : AND CEASE-AND-DESIST PROCEEDINGS,  

: PURSUANT TO SECTIONS 15(b) AND 21C   
: OF THE SECURITIES EXCHANGE 

David C. Levine, : ACT OF 1934, MAKING FINDINGS, AND  
: IMPOSING REMEDIAL SANCTIONS AND  

Respondent. : A CEASE-AND-DESIST ORDER  
______________________________: 

I. 

The Securities and Exchange Commission (“Commission”) deems it appropriate and in 
the public interest that public administrative and cease-and-desist proceedings be, and hereby 
are, instituted pursuant to Sections 15(b) and 21C of the Securities Exchange Act of 1934 
(“Exchange Act”) against David C. Levine (“Levine” or “Respondent”). 

II. 

In anticipation of the institution of these proceedings, Respondent has submitted an Offer 
of Settlement (the “Offer”) which the Commission has determined to accept.  Solely for the 
purpose of these proceedings and any other proceedings brought by or on behalf of the 
Commission, or to which the Commission is a party, and without admitting or denying the 
findings herein, except as to the Commission’s jurisdiction over him and the subject matter of 
these proceedings, which are admitted, Respondent consents to the entry of this Order Instituting 
Administrative and Cease-and-Desist Proceedings Pursuant to Sections 15(b) and 21C of the 
Securities Exchange Act of 1934, Making Findings, and Imposing Remedial Sanctions and a 
Cease-and-Desist (“Order”), as set forth below. 



 

 
 

 

 
 

 

 

 

  
 

 

 

                                                 
      

  

III. 

On the basis of this Order and Respondent’s Offer, the Commission finds that1: 

Summary 

These proceedings arise out of violations by GunnAllen Financial, Inc. (“GunnAllen”), 
formerly a Tampa, Florida-based broker-dealer, of Regulation S-P which governs the privacy 
and protection of consumer financial information.  Between March and June 2010, as it was 
winding down its business operations and planned to file for bankruptcy, GunnAllen’s president 
authorized the transfer of approximately 16,000 direct application accounts with an estimated 
total net asset value of $850 million to Levine, who then served as GunnAllen’s National Sales 
Manager, and any broker-dealer with whom he became affiliated.  Direct application accounts 
are those accounts held by the product issuer, typically a mutual fund or insurance company.   

In connection with this transfer, and prior to resigning from GunnAllen, Levine 
downloaded nonpublic customer information for the 16,000 accounts on a portable thumb drive.  
Levine resigned from GunnAllen on April 23, 2010, and then affiliated with a new broker-dealer.  
Two weeks after joining the new broker-dealer, Levine mailed a letter, reviewed and approved 
by GunnAllen’s president and on GunnAllen letterhead, notifying the 16,000 customers that 
GunnAllen could no longer service the accounts, that Levine and his business partner were 
servicing the accounts, and advising them of their right to “opt out” of the transfer.  This letter 
failed to provide customers with a reasonable opportunity to opt out of the transfer because, 
among other things, it was sent after the customers’ information was transferred to Levine and it 
did not provide procedures on how to exercise that right, contact information or even the identity 
of the new broker-dealer. Thereafter, Levine supplied the broker-dealer receiving the accounts 
with nonpublic personal information for the 16,000 accounts, including the product custodian, 
the account holder’s name and address, and the account number and value for each account. 

GunnAllen’s transfer of this nonpublic information without providing its customers 
reasonable notice to opt out violated Rule 10(a)(1) of Regulation S-P (17 C.F.R. §248.10(a)(1)), 
which prohibits broker-dealers from disclosing nonpublic personal information they collect from 
customers to nonaffiliated third parties unless they notify their customers of their right to opt out 
of the disclosure in accordance with Rule 7(a) of Regulation S-P (17 C.F.R. §248.7(a)), and they 
provide their customers with a reasonable opportunity to opt out of the disclosure.  Levine also 
took possession of the information in a manner that placed the information at risk of 
unauthorized access and use in contravention of GunnAllen’s obligation to ensure the security 
and confidentiality of the information as required by Rule 30(a) of Regulation S-P (the 
“Safeguard Rule”) (17 C.F.R. §248.30(a)). As a result, Levine aided and abetted and caused 
GunnAllen’s violations of Rules 7(a), 10(a) and 30(a) of Regulation S-P.    

 The findings herein are made pursuant to Respondent’s Offer of Settlement and are not binding on any other 
persons or entities in this or any other proceeding. 

2
 

1



 

 

 
 

 
 

 
 

 
 

 

 

 
 

 
 

 
 

 

 
 

 

Respondent 

1. Levine, age 44, resides in Delray Beach, Florida.  From May 2005 to April 2010, 
Levine served as GunnAllen’s National Sales Manager.  Although he was employed with 
GunnAllen through the end of April 2010, on March 30, 2010, GunnAllen filed Forms U5 
terminating the registrations of all its representatives, including Levine’s. 

GunnAllen Financial, Inc. 

2.  GunnAllen had a principal place of business in Tampa, Florida and was 
registered with the Commission as a broker-dealer from March 1986 to April 2010.  The firm 
operated mostly under an independent contractor model and maintained franchise offices 
nationwide. In March 2010, the Financial Industry Regulatory Authority (FINRA) determined 
that GunnAllen did not have the requisite net capital to conduct business as a broker-dealer and 
restricted its operations to liquidating securities transactions.  Unable to raise the additional 
capital it needed to continue to conduct business, in April 2010 GunnAllen discontinued its 
operations, filed for bankruptcy, and submitted a Broker-Dealer Withdrawal, or “BDW”, Form 
with the Commission withdrawing its registration.  The withdrawal became effective on June 11, 
2010. 

The Account Transfers 

3. As it was winding down its business operations in March and April 2010, 
GunnAllen and its registered representatives transferred the firm’s customer accounts to other 
broker-dealers. In addition to servicing the brokerage accounts held by its clearing firm, 
GunnAllen serviced and was the broker of record on tens of thousands of direct application 
accounts held by various mutual fund and variable annuity and insurance companies.  As broker 
of record on the direct application accounts, GunnAllen was entitled to the commissions, trailers 
and other fees generated by the accounts. 

4. On March 28, 2010, GunnAllen sent a letter, drafted by Levine and reviewed and 
approved by GunnAllen’s president, to all of the firm’s direct application account customers 
notifying them that it expected to cease operations on March 31, 2010 (the “First  Notice”). The 
First Notice instructed customers that they had three options for arranging ongoing service of 
their accounts: (i) they could contact their GunnAllen registered representative to make 
arrangements to transfer their account to the new firm with which he or she associated, (ii) they 
could contact a brokerage firm of their own choice and request their account be transferred to 
that firm, or (iii) they could contact the mutual fund or variable annuity or insurance company 
holding their investment directly to make arrangements for service. 

5. However, on March 30, 2010, just two days after GunnAllen sent the First Notice, 
at the request of Levine, GunnAllen’s president authorized the transfer of approximately 16,000 
direct application accounts serviced by GunnAllen, which had an estimated total net asset value 
of $850 million.  GunnAllen’s president executed “Block Broker-Dealer Change Authorization 
for Directly Held Accounts” forms (the “Block Transfer Forms”) covering those accounts and 

3
 



 

 

 
 

 

 
 

   

 
 

 

 
 

 
 

 

gave the signed Block Transfer Forms to Levine and another GunnAllen representative with 
whom Levine planned to form a business partnership when GunnAllen ceased doing business.  
The executed Block Transfer Forms authorized the transfer of the 16,000 accounts to any broker-
dealer that Levine and his partner chose to associate with after they left GunnAllen.  

6.  In April 2010, while assisting in the wind down of GunnAllen’s business 
operations, Levine and his partner sought employment with other brokerage firms by offering, 
among other things, to transfer to them the direct application accounts for which they held the 
Block Transfer Forms.  On April 23, 2010, they were hired by another broker-dealer registered 
with the Commission (the “Receiving Broker”).   Levine and his partner agreed to share 10% of 
the commissions, trailers and other fees generated by the accounts with the Receiving Broker and 
to solicit the account holders to purchase additional products from the Receiving Broker. 

7. The same day that Levine was hired by the Receiving Broker, he resigned from 
GunnAllen. On April 23, 2010, or shortly before then, Levine, with the approval of GunnAllen’s 
president, downloaded a spreadsheet from a GunnAllen computer server or drive to a personal 
thumb drive and physically removed it from the firm.  The spreadsheet contained the custodian, 
account holder’s name and address (but not his or her social security number), and account 
number and value for each of the approximately 16,000 direct application accounts covered by 
the Block Transfer Forms. 

8. Two weeks after associating with the Receiving Broker, on May 14, 2010, 
Levine, with the approval of GunnAllen’s president, sent the GunnAllen customers holding the 
direct application accounts a letter notifying them that their accounts would be transferred to the 
brokerage firm he was newly associated with unless they objected to the transfer within fifteen 
days of the date of the letter (the “Second Notice”).  Levine drafted and personally paid for the 
cost of copying and mailing the Second Notice, which was on GunnAllen letterhead.  Levine 
engaged a third party vendor to copy and mail the Second Notice on his behalf and supplied it 
with the customer names and addresses he took from GunnAllen on his thumb drive.  

9. After mailing the Second Notice, Levine contacted GunnAllen to see if it had 
received notices from any customers seeking to opt out of the account transfer, but did not take 
any other steps to verify customer objections to the transfer and, thereafter, e-mailed the 
Receiving Broker the customer account information that had been released to him by GunnAllen 
on his thumb drive.  Levine’s partner supplied the Receiving Broker with the Block Transfer 
Forms.  

10. Beginning on June 3, 2010, and continuing through at least June 7, 2010, the  
Receiving Broker counter-signed the Block Transfer Forms accepting the direct application 
accounts from GunnAllen. It also delivered the fully executed forms to the appropriate mutual 
fund and variable annuity and insurance companies along with a letter instructing them to change 
the broker of record on the direct application accounts from GunnAllen to the Receiving Broker. 

4
 



  

 

 
 

 
 

 
 

 
 

 

     
 

 
 

 
 

                                                 
        

      

Violations of the Privacy Rules 

11. Rule 10(a) of Regulation S-P prohibits brokers and dealers, either directly or 
through an affiliate, from disclosing nonpublic personal information about their customers to 
nonaffiliated third parties unless they have provided their customers with a privacy notice 
describing the nonpublic personal information they disclose, and notify their customers of their 
right to opt out of any disclosure and afford them a reasonable opportunity to opt out of the 
disclosure before it is made. 

12. Rule 7(a) of Regulation S-P requires brokers and dealers to provide their 
customers with opt out notices that are clear and conspicuous and that accurately explain 
customers’ opt out rights.  The notice must explicitly state that the broker or dealer discloses, or 
reserves the right to disclose, nonpublic personal information about its customers and that they 
have the right to opt out of any disclosure. Additionally, the notice must provide a reasonable 
means by which customers can exercise their right to opt out.  

13. GunnAllen violated Rules 7(a) and 10(a) of Regulation S-P by failing to provide 
the direct application account customers whose accounts were transferred to the Receiving 
Broker with proper notice and a reasonable opportunity to opt out of the transfer before 
supplying their personal nonpublic information to Levine and the Receiving Broker.  Also, 
GunnAllen’s disclosure of the information was not covered by any exception from Regulation S-
P’s notice and opt out requirements, including an exception in Rule 14 of Regulation S-P for 
disclosures that are required, or are a usual, appropriate, or acceptable method, in connection 
with the transfer of accounts, because GunnAllen failed to obtain the customers’ affirmative 
consent to transfer the direct applications accounts.  The First and Second Notices failed to 
inform account holders that GunnAllen would physically transfer or, in the case of the Second 
Notice, had physically transferred, their account information.  The Second Notice also failed to 
provide account holders with a reasonable means to exercise their right to opt out of the transfer, 
or sufficient time within which to do so.  Further, the direct application account customers were 
not provided with a paper or electronic form to object to the transfer although Rule 7(a)(2)(iii) of 
Regulation S-P expressly states it is unreasonable “if the only means of opting out is for the 
consumer to write his or her own letter to exercise the opt out right.”  Finally, the Second Notice 
provided only fifteen days to opt out of the transfer although the circumstances did not warrant 
such a short response period. 

14. As a result of the conduct described above, Levine willfully2 aided and abetted 
and caused GunnAllen’s violations of Rules 7(a) and 10(a) of Regulation S-P.   

Violations of the Safeguard Rule 

15. Rule 30(a) of Regulation S-P, or the Safeguard Rule, requires every broker and 
dealer to maintain policies and procedures that address administrative, technical, and physical 

 A willful violation of the securities laws means merely “that the person charged with the duty knows what he is 
doing.”  Wonsover v. SEC, 205 F.3d 408, 414 (D.C. Cir. 2000) (quoting Huges v. SEC, 174 F.2d 969, 977 (D.C. Cir. 
1949). 

5
 

2



   

 

 
 

 
 

 
 

 

 

 

 
  

  
 

 
 

safeguards for the protection of customer records and information.  The policies and procedures 
must be reasonably designed to (1) insure the security and confidentiality of customer records 
and information; (2) protect against any anticipated threats or hazards to the security or integrity 
of customer records and information; and (3) protect against unauthorized access to or use of 
customer records or information that could result in substantial harm or inconvenience to any 
customer. 

16. GunnAllen violated Rule 30(a) of Regulation S-P because it knew that there was a 
reasonably foreseeable risk that its departing registered representatives would disclose customer 
nonpublic personal information to successor brokerage firms but nonetheless failed to adopt, and 
did not have in place while winding down its operations, any written policies or procedures 
addressing the transfer and protection of such information.   

17. As a senior officer of GunnAllen, Levine was familiar with Regulation S-P and 
GunnAllen’s responsibilities under the rule for maintaining the confidentiality and physical 
security of the information that the firm collected from its customers.  Nonetheless, he placed 
customer information at risk of unauthorized access and misuse when he knowingly downloaded 
customer information for approximately 16,000 GunnAllen direct application accounts to a 
personal thumb drive that he physically took from the firm.   

18. As a result of the conduct described above, Levine willfully aided and abetted and 
caused GunnAllen’s violations of Rule 30(a) of Regulation S-P.  

IV. 

In view of the foregoing, the Commission deems it appropriate and in the public interest 
to impose the sanctions agreed to in Respondent’s Offer. 

Accordingly, pursuant to Sections 15(b) and 21C of the Exchange Act, it is hereby 
ORDERED that: 

A. Respondent Levine cease and desist from committing or causing any violations and 
any future violations of Rules 7(a), 10(a) and 30(a) of Regulation S-P. 

B.	 R 
espondent Levine is censured. 

C. Respondent Levine shall, within ten days of the entry of this Order, pay a civil money 
penalty of $20,000 to the United States Treasury.  If timely payment is not made additional 
interest shall accrue pursuant to 31 U.S.C. 3717.  Such payment shall be: (A) made by wire 
transfer, United States postal money order, certified check, bank cashier’s check, or bank money 
order; (B) payable to the Securities and Exchange Commission; (C) hand-delivered or mailed to 
the Office of Financial Management, Securities and Exchange Commission, Operations Center, 
6432 General Green Way, Alexandria, VA  22312-0003; and (D) submitted under cover letter 
that identifies Levine as a Respondent in these proceedings, the file number of these  

6
 



 

proceedings, a copy of which cover letter and wire transfer, money order or check shall be sent 
to Teresa J. 

7
 



 

 

 

 
 
        

 

Verges, Assistant Regional Director, Miami Regional Office, Securities and Exchange 
Commission, 801 Brickell Avenue,  Suite 1800, Miami, FL 33131. 

By the Commission. 

Elizabeth M. Murphy 
       Secretary  

8
 



 

 
 
 

   

  
 
 

 
 

   
  

 

 
 

 

 

 
 
 

Service List 

Rule 141 of the Commission's Rules of Practice provides that the Secretary, or another 
duly authorized officer of the Commission, shall serve a copy of the Order Instituting 
Administrative and Cease-and-Desist Proceedings, Pursuant to Sections 15(b) and 21C of the 
Securities Exchange Act of 1934, Making Findings, and Imposing Remedial Sanctions and a Cease-
and-Desist Order ("Order") on the Respondent and his legal agent. 

The attached Order has been sent to the following parties and other persons entitled to 
notice: 

Honorable Brenda P. Murray 
Chief Administrative Law Judge 
Securities and Exchange Commission 
100 F Street, N.E. 
Washington, DC 20549-2557  

Teresa J. Verges, Esq. 
Miami Regional Office 
Securities and Exchange Commission 
801 Brickell Avenue, Suite 1800 
Miami, FL  33131 

David C. Levine 
c/o Gregg J. Breitbart, Esq. 
Gusrae, Kaplan, Bruno & Nusbaum PLLC 
2101 NW Corporate Boulevard, Suite 218 
Boca Raton, FL 33431 

Gregg J. Breitbart, Esq. 
Gusrae, Kaplan, Bruno & Nusbaum PLLC 
2101 NW Corporate Boulevard, Suite 218 
Boca Raton, FL 33431 

9